CVE-2020-1277

7.8 highEPSS 0.8%

High (7.8) in microsoft. EPSS 0.8% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272, CVE-2020-1302, CVE-2020-1312.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
Published: 2020-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016
microsoft:windows_server_2019

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1277
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1277

Check your stack JSON